CVE-2013-4828 Weak cryptography in n/a
Remote attackers can obtain sensitive information from improperly encrypted PDF documents on specific HP LaserJet and ScanJet devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-4828?
CVE-2013-4828 is a medium-severity vulnerability in n/a, published on 4 Oct 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via unspecified vectors.
Weakness: CWE-310
Which versions are affected by CVE-2013-4828?
It affects 22 products.
Products include Hp Color Laserjet Cm4540, Hp Color Laserjet Cm4540f, Hp Color Laserjet Cm4540fskm, Hp Color Laserjet M575dn, Hp Color Laserjet M575f, Hp Color Laserjet M775dn and 16 more.
How do I fix CVE-2013-4828?
No fix has been published for CVE-2013-4828 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-4828 being exploited?
There is no known exploitation of CVE-2013-4828 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-ppp9-mcjx-cpc7.